CVE-2022-4616

· HIGHModified

← All CVEs

CVSS v3.1

7.2

EPSS

4.76%

Published

Jan 12, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through the network diagnosis page. This vulnerability could allow a remote unauthenticated user to add files, delete files, and change file permissions.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-77

Affected Products (2)

deltaww · dx-3021l9_firmware (up to 1.24)vulnerable

deltaww · dx-3021l9

References (4)

https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC

ProductVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05

Third Party AdvisoryUS Government Resource

https://downloadcenter.deltaww.com/en-US/DownloadCenter?v=1&CID=06&itemID=060308&downloadID=DX&dataType=12&sort_expr=cdate&sort_dir=DESC

ProductVendor Advisory

https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-05

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs